Privacy Policy

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations:

jambit GmbH

Friedenheimer Brücke 20

80639 Munich, Germany

The data controller has appointed a data protection officer, who can be reached as follows:

Data Protection Officer

Friedenheimer Brücke 20

80639 Munich

Phone: +49.89.45 23 47 - 0

E-mail: dsb@jambit.com

For security reasons and to protect the transmission of personal data and other confidential content (e.g. contact), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

Every time you visit our website, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:

1. Information about the browser type and version used
2. The user's operating system
3. The user's Internet service provider
4. The IP address of the user
5. Date and time of access
6. Websites from which the user's system accesses our website
7. Websites accessed by the user's system through our website

The data is also stored in the log files of our system. Not affected by this are the IP addresses of the user or other data that enable the assignment of the data to a user. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of data is Art. 6 para. 1 lit. a GDPR.

Change cookie settings

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the requesting browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

1. Language settings
2. Log-in information

We also use cookies on our website which enable an analysis of the user's surfing behavior. This way, the following data can be transmitted:

1. Entered search terms
2. Frequency of page views
3. Use of website functions

When accessing our website, the user is informed about the use of cookies for online marketing and analytical purposes and his or her consent to the processing of personal data used in this context is obtained. In this context, reference is also made to this data protection declaration.

Information on the purpose of the use of online marketing and web analytics cookies is provided in the respective paragraphs.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal data using cookies for analytical purposes is Art. 6 para. 1 lit. a GDPR.

Cookies are stored on the user's computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

We process the following personal data which is transmitted to us by the user in the context of contacting us or an application via e-mail and/or the application form:

1. First name, surname, and title of the user
2. E-mail address of the user
3. Content of the message
4. Any documents provided as attachments, e.g. application documents

The data will be forwarded to the responsible contact person within the company and used exclusively for the designated purpose of contacting or carrying out the application process. The data will not be passed on to third parties; affiliated companies are not considered third parties.

If the data processing serves to safeguard our legitimate interests, Art. 6 (1) lit. f GDPR can be considered as a legal basis. If the purpose of contacting is to conclude a contract, Art. 6 (1) lit. b GDPR is the legal basis for the processing.

If the data processing is carried out for the purpose of initiating an employment relationship, Art. 88 (1) GDPR in conjunction with § 26 (1) BDSG shall apply. § 26 para. 1 BDSG. If the applicant gives their separate consent for the inclusion of his data into an applicant pool, Art. 6 (1) lit. a GDPR is the legal basis for data processing.

The data will be deleted as soon as they are no longer required for the purpose of their collection. For data transmitted via e-mail and/or the contact form, this holds true as soon as the respective conversation has ended. The conversation has ended when it can be inferred from the circumstances that the issue/question has been conclusively settled.

We process personal data that is transmitted to us by the user as part of their registration for events, newsletters, sweepstakes or exclusive content such as white papers via our website. The respective form shows which data is collected in the case of registrations.

The user agrees that their personal data may be processed within the framework of the organization of our event (e.g. confirmation mail, acceptance, or cancellation, changes to the event data, reminder mail of the event). Art. 6 para. 1 lit. a GDPR is the legal basis for data processing. If the data is transferred to third parties, the user will be informed during the registering process for the event; affiliated companies are not considered third parties.

By registering for the newsletter, the user agrees that their personal data will be regularly received by us for the purpose of providing current information on news and events as well as being processed for events. Art. 6 para. 1 lit. a GDPR is the legal basis for data processing.

The processing of your personal data is carried out for the purpose of processing the sweepstakes, in particular for determining and notifying the winner. For the purpose of sending and delivering prizes, we may subsequently collect and process further data. Art. 6 para. 1 lit. a GDPR is the legal basis for data processing.

Through their separate consent, the user agrees to the processing of their personal data for an advertising approach about the service portfolio of jambit. Art. 6 para. 1 lit. a GDPR is the legal basis for data processing.

In return for receiving exclusive content, the user agrees that their personal data may be processed for promotional contact about the service portfolio of jambit by e-mail or telephone. Art. 6 para. 1 lit. b GDPR is the legal basis for data processing.

We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you our newsletter by e-mail if you have expressly confirmed to us by means of a link received by e-mail that you consent to receive our newsletters.

Our newsletter is sent via CleverReach®. We pass on the data you provided when you registered for the newsletter to CleverReach®. This information disclosure is in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using a promotionally effective, secure, and user-friendly newsletter system.

CleverReach® uses this information to send and statistically evaluate the newsletter on our behalf. For evaluation purposes, the e-mails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. Technical information is also collected (e.g. time of access, IP address, browser type, and operating system). The data is only collected pseudonymously and is not linked to your other personal data. This way, a direct personal reference is excluded. This data is used exclusively for statistical analysis of newsletter campaigns. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

The data will be deleted as soon as they are no longer required for the purpose of their collection.

LinkedIn Lead Gen Forms

We use the Product Marketing Solutions of LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA and its representatives in the Union LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

LinkedIn uses a form (the LinkedIn Lead Gen Forms) to submit personal information to us. Lead Gen Forms are forms pre-filled with LinkedIn profile information that allow members to submit their information that is publicly visible on the network with just a few clicks. Requests generated via the forms are submitted directly to us. These are usually:

• First and last name
• E-mail address

For more information about LinkedIn's collection and storage of data, please visit www.linkedin.com/legal/privacy-policy

By registering for the newsletter, the user agrees that their personal data will be processed by us on a regular basis to provide current information on news and events. Art. 6 paragraph 1 letter a GDPR is the legal basis for data processing. For more information on sending our email newsletters, please see the paragraph "Registration for events, newsletters, or exclusive content".

In return for receiving exclusive content like white papers, the user agrees that their personal data will be processed for advertising purposes via e-mail or telephone to address them about jambit's service portfolio. Art. 6 para. 1 lit. b GDPR is the legal basis for the data processing.

The data will be deleted as soon as they are no longer required for the purpose of their collection.

With the following link, you can deactivate LinkedIn using your personal data: LinkedIn Opt-Out

Use of LinkedIn Insights and Conversion Tracking

Collected data:

We use the LinkedIn Insight tag for this website. The LinkedIn Insight tag creates a LinkedIn "browser cookie" which collects the following information:

• IP address,
• Time stamp,
• Page activities,
• demographic information about LinkedIn – if the user is an active LinkedIn member

This technology allows us to generate reports on the performance of our ads and information about site interaction. The LinkedIn Insight tag is embedded in this website, which connects to the LinkedIn server when you visit this website and are logged into your LinkedIn account.

Nature and purpose of processing:

We process your data to evaluate campaigns and collect information about website visitors who may have reached us through our LinkedIn campaigns.

Legal basis:

You have consented to us processing your data according to Art. 6 para. 1 p. 1 lit. a. GDPR.

Storage period and control options:

We store your data as long as we need them for the respective purpose (campaign evaluation), or as long as you have not objected to the storage of your data or revoked your consent.

The collected data is encrypted. Further information can be found here.

Here you can find the LinkedIn privacy statement, as well as the LinkedIn Opt-Out.

Use of Meta Pixel

Our website uses Meta Pixel. The provider of this service is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 USA with its European representative: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland.

When you visit our website, Meta creates a cookie that collects the following data:

• IP address,
• Time stamp,
• Page activities,
• Browser information

This technology allows us to generate reports on the performance of our ads and website interaction information. For this purpose, the Meta pixel is embedded in this website, which establishes a connection to the Meta server when you visit this website and are logged into your Facebook account or Instagram account.

Nature and purpose of processing:

We process your data to evaluate campaigns and collect information about website visitors who may have reached us through our Meta campaigns.

Legal basis:

You have consented to us processing your data according to Art. 6 para. 1 p. 1 lit. a. GDPR.

Storage period and control options:

We store your data as long as we need it for the respective purpose (campaign evaluation), or as long as you have not objected to the storage of your data or revoked your consent.

The collected data is encrypted. For more information, please see the Meta Privacy Policy, as well as the Meta Opt-Out.

The service may transfer the collected data to another country. Please note that this country might not provide an adequate level of data protection. If the data is transferred to the U.S., there is a risk that your data may be processed by U.S. authorities for control and monitoring purposes, without you possibly having any legal remedies.

Use of Google AdWords

Nature and purpose of the processing:

Our website uses Google Conversion Tracking. The operating company of Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advertisement placed by Google, Google AdWords will place a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad served by Google.

If the user visits certain pages on our website and the cookie has not yet expired, we and Google can tell that the user was redirected to that page by clicking the specific ad. Each Google AdWords customer receives a different cookie and cannot be tracked through the website. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Such customers experience the total number of users who clicked on an ad and were directed to a site that was tagged with a conversion tracking tag. Information that can be personally identified by users is not transmitted.

Legal basis:

Your consent serves as legal basis for the integration of Google AdWords and the associated data transfer to Google (Art. 6 para. 1 lit. a GDPR).

Recipients:

Whenever you visit our website, personal data, including your IP address, is transferred to Google, USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.

Our company does not receive any information from Google by which the respective person could be identified.

Storage period:

These cookies lose their validity after 30 days and are not used for personal identification.

Third country transfer:

Third country transfers are possible. So-called standard contractual clauses according to Art. 46 GDPR have been concluded as suitable guarantees. Cookies can be deactivated at the following URL:

https://support.google.com/ads/answer/7395996

Revocation of consent:

If you do not want to participate in the tracking, you can reject the required setting of a cookie in your browser setting by disabling the automatic setting of cookies or by blocking your browser cookies of the domain "googleleadservices.com".

Please note that you are not allowed to delete the opt-out cookies as long as you do not wish to record measurement data. If you deleted all your cookies in your browser, you would have to set the respective opt-out cookie again.

Provision required or necessary:

The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Use of Google Analytics

This website uses uses Google Analytics, a web analysis service for statistical analysis of visitor access. The provider of this service is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Analytics uses so-called cookies, which are text files placed on your computer, to help the website analyze the user's behavior.

The information generated by the cookie about your use of the website is stored on a server in European Union.

The data collected by this service may be transferred to another country. Please keep in mind that this service may send data to a country that does not provide adequate data protection. If the data is transferred to the United States, there is a risk that it will be processed by US authorities for control and monitoring purposes, with no legal recourse available to you.

The IP address is anonymized immediately after processing and before storage. You have the option to prevent the installation of cookies by changing the settings in your browser. But please notice in case of setting changes, not all website functions may be available.

You can decide whether a unique web analysis cookie may be stored in your browser to enable the website operator to collect and analyze various statistical data.

For more information on the privacy settings of Google Analytics, please see: https://policies.google.com/privacy?hl=en-US .

For more information on the cookie policy of Google Analytics, please see: https://policies.google.com/technologies/cookies?hl=en-US .

• Data processing is based on the user's consent (Art. 6 para. 1 lit. a GDPR).
• Data deletion takes place as soon as it is no longer required for recording purposes.
• The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
• You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
• With the help of the tracking tool Matomo, the behavior of visitors/users of the website can be evaluated and interests analyzed. For this purpose, we create a pseudonymous user profile.

Use of Google Maps

This website uses Google Maps API to display geographical information visually. When using Google Maps, Google also collects, processes and uses data about the use of map functions by visitors. You can find more detailed information about data processing by Google in the Google data protection policy. There you can also change your personal data protection settings in the Data Protection Center.

Detailed instructions for managing your own data in connection with Google products can be found here: Google Privacy Policy.

Embedded YouTube videos

On some of our websites we embed YouTube videos. YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA is the operator of the corresponding plug-ins. When you visit a page with the YouTube plugin, a connection to Youtube servers is established. Youtube will be informed which pages you visit. If you are logged into your Youtube account, Youtube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

If you have deactivated the storage of cookies for the Google Ad program, you will not have to reckon with such cookies when viewing YouTube videos. Youtube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the saving of cookies in your browser.

Further information on data protection at"Youtube" can be found in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy/.

Social media buttons

On our website we offer you the possibility of using so-called "social media buttons". To protect your data, we rely on the "Shariff" solution for implementation. With this, these buttons on the website are merged only as a diagram, which contains a link to the appropriate website of the provider of the button. By clicking on the graphic you will be forwarded to the services of the respective provider. Only then will your data be sent to the respective providers. If you do not click on the graphic, there is no exchange between you and the providers of the social media buttons. Information about the collection and use of your data in the social networks can be found in the respective terms of use of the respective providers. More information about the Shariff solution can be found here: http://www.heise.de/ct/artikel/Shariff- Social-Media-Buttons- mit-Datenschutz- 2467514.html

We have integrated the social media buttons of the following companies on our website:

Facebook Inc. (1601 S. California Ave - Palo Alto - CA 94304 - USA); XING AG (Gänsemarkt 43 - 20354 Hamburg - Deutschland); LinkedIn Corporation (2029 Stierlin Court - Mountain View - CA 94043 - USA)

kununu score

We have integrated the kununu score from New Work SE, Dammtorstraße 30, 20354 Hamburg ("XING") on our career page. When you call up a job advertisement that has a kununu score, a connection to the XING server will be established via your browser and your IP address will be transmitted to XING.

Here you can find additional information about the kununu score (only available in German).

The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) towards the controller with regard to the processing of your personal data, which we inform you about below:

• Right of access in accordance with Art. 15 GDPR: In particular, you have the right of access to your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period, and/or the criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing that concern you, as well as your right to be informed about what guarantees exist in accordance with Art. 46 GDPR when your data is transferred to third countries;
• Right to rectification in accordance with Art. 16 GDPR: You have the right to have any inaccurate data relating to you corrected without delay and/or to have any incomplete data stored by us completed;
• Right to deletion in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the conditions of Art. 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified; if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you require your data for the assertion, exercise or defense of legal claims after we no longer need this data after the purpose has been achieved; or if you have lodged an objection for reasons relating to your particular situation as long as it has not yet been determined whether our legitimate grounds prevail;
• Right to information in accordance with Art. 19 GDPR: If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
• Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible;
• Right to revoke consent given in accordance with Art. 7 (3) GDPR: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;
• Right to lodge a complaint in accordance with Art. 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

Right of objection

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.

The storage duration of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent in accordance with Art. 6 (1) a GDPR, this data is stored until the data subject revokes their consent.

If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part in continuing to store it.

When processing personal data on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Article 21 (2) GDPR.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.